hi I am trying to figure out why our fortigate configuration is not
honouring the phase 1 lifetime setting of 28800s (8hrs)Over the weekend
I started monitoring the tunnel with pingplotter and noticed a clear
pattern as to when the phase 1 rekey happ...
hi we have an IPSEC tunnel configured on our fortigate FW which is
linked to Azure.this tunnel has intermittent connectivity drop outs and
its affecting production servers/users and what they are doing.as far as
I can tell the phase 1 and phase 2 set...
we found the root cause of our issues.the IPsec tunnel was configured
with a 'loopback interface', and for whatever reason this was causing
the timeout errors and network drops. (further investigation into this
will be happening) Once I discovered th...
hi,I managed to grab a wireshark capture from the diagnostics option in
the GUI. The capture was targeting the Azure IP, however there was
nothing there to indicate any network issues between the 2 locations. No
drops or anything to indicate a timeou...
hey thanks for the feedback.from what you are saying it sounds like the
fortigate is struggling somewhere... potentially dropping packets along
the way.packet loss is something that has crossed my mind, ive come
across many technical tips/forum posts...
update to this we changed the azure connection to ResponderOnly but the
issue is still happening.I can see in the fortigate logs that the
fortigate is now acting as the initiator.interval is still 7hrs and
38min.another thing ive noticed is that phas...